IBM MaaS360

IBM MaaS360

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Automated User and Device Deactivation.

    Posted 11/13/18 09:04 AM
    We have User Deactivation set to sync with our MS Active Directory.

    The deactivation summary email currently only shows the raw count of users and devices deactivated, not the names.  This makes account auditing more difficult as this feature doesn't appear to get 100% of the users as they are disabled.

    Are there any plans in your roadmap to list the actual Username, Email address of the deactivated user in the summary emails?


    ------------------------------
    -DRU
    ------------------------------


  • 2.  RE: Automated User and Device Deactivation.

    Posted 11/13/18 02:51 PM
    Hello,

           Just joined the community, and am a partner. I'm confused about your question.

    Regards,

    Mr. Glennell Burnette



    ------Original Message------

    We have User Deactivation set to sync with our MS Active Directory.

    The deactivation summary email currently only shows the raw count of users and devices deactivated, not the names.  This makes account auditing more difficult as this feature doesn't appear to get 100% of the users as they are disabled.

    Are there any plans in your roadmap to list the actual Username, Email address of the deactivated user in the summary emails?


    ------------------------------
    -DRU
    ------------------------------


  • 3.  RE: Automated User and Device Deactivation.

    Posted 11/13/18 04:59 PM
    In Maas360, from the menu ... Users, More, User Settings, Basic ...

    The first option.   
    "Specify the behavior on user being inactivated" is set to:  "Mark the user and devices in Maas360 as Inactive"

    So when a user departs the company, and their user is account is disabled in Active Directory, a period of time (up to 48hrs) afterwards Maas360 will mark the user and any devices they had as inactive.

    I periodically get a summary email from Maas for these deactivations.
    The message looks like this:

    Summary of automated user & device deactivations:

    Local Directory users detected as inactive between: 11-12-2018 20:00 GMT to 11-13-2018 00:00 GMT

    Number of Local Directory users deactivated: 1
    Number of devices of Local users deactivated: 0

    User Directory users detected as inactive between: 11-12-2018 00:02 GMT to 11-12-2018 04:02 GMT

    Number of User Directory users deactivated: 3
    Number of devices of User Directory users deactivated: 2

    I am asking if there are any plans in the road map of Maas to provide a list of the User ID's or Email Addresses that were deactivated in this automated fashion, rather than just a summary count.




    ------------------------------
    -DRU
    ------------------------------

    Original Message


  • 4.  RE: Automated User and Device Deactivation.

    Posted 11/14/18 01:44 PM

    Hi Andrew'


    I am not the one whom makes deletion decisions, seeing as how I don't receive a salary, nor paycheck from IBM. Are you trying to tell me that partners are deactivated, including community users? If the system is set up to delete inactive people, partners, and community users should be notified via U.S. Postal Mail, since cracking, hacking, and tapping is throughout IT!


    From: Mr. Glennell Burnette

    Original "Icon Electronics" USA Owner

    NC Merchant Certificate Holder Since Jan.-2003

    FCC-GROL w/Radar Endorsement Holder

    INARTE Proctor/Telecom Specialist



    ------Original Message------

    In Maas360, from the menu ... Users, More, User Settings, Basic ...

    The first option.   
    "Specify the behavior on user being inactivated" is set to:  "Mark the user and devices in Maas360 as Inactive"

    So when a user departs the company, and their user is account is disabled in Active Directory, a period of time (up to 48hrs) afterwards Maas360 will mark the user and any devices they had as inactive.

    I periodically get a summary email from Maas for these deactivations.
    The message looks like this:

    Summary of automated user & device deactivations:

    Local Directory users detected as inactive between: 11-12-2018 20:00 GMT to 11-13-2018 00:00 GMT

    Number of Local Directory users deactivated: 1
    Number of devices of Local users deactivated: 0

    User Directory users detected as inactive between: 11-12-2018 00:02 GMT to 11-12-2018 04:02 GMT

    Number of User Directory users deactivated: 3
    Number of devices of User Directory users deactivated: 2

    I am asking if there are any plans in the road map of Maas to provide a list of the User ID's or Email Addresses that were deactivated in this automated fashion, rather than just a summary count.




    ------------------------------
    -DRU
    ------------------------------


  • 5.  RE: Automated User and Device Deactivation.

    Posted 11/14/18 12:44 PM
    Edited by Sathyajith Prabhu 11/14/18 12:45 PM

    Hi Andrew,

    This should be feasible. Would you be keeping track everyday which are the users which got deactivated? Would like to understand the use case more. You can raise a Request for Enhancement (RFE) and mention the details there.
    Also the payloads from the Cloud Extender are not sent all at once. They are usually sent in few batches. It is done every few hours and the users getting disabled would depend on the payload received from CE. If you see a bug, please do contact support.

    Link for RFE - https://www.ibm.com/developerworks/library/clear17/fiberlink/index.html



    ------------------------------
    Sathyajith Prabhu
    MaaS360 Offering Management
    ------------------------------



Related Content